Update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anthropics/claude-code-action	action	digest	833fb0f → 9c5ddab
dtolnay/rust-toolchain	action	digest	4360b52 → 6bed076
pnpm/action-setup	action	minor	v6.0.10 → v6.1.0

---

Release Notes

pnpm/action-setup (pnpm/action-setup)

v6.1.0

Compare Source

What's Changed

• feat: support pnpm v12 by @​zkochan in #​288

Full Changelog: pnpm/action-setup@v6.0.10...v6.1.0

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • Only on Monday (* * * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cloudflare-workers-and-pages]

Deploying mouseterm with    Cloudflare Pages

Latest commit:	0d33807
Status:	✅  Deploy successful!
Preview URL:	https://005bd031.mouseterm.pages.dev
Branch Preview URL:	https://renovate-github-actions.mouseterm.pages.dev

View logs

[dormouse-bot]

Reviewing as a draft — flagging anything that looks worth a quick fix. Mark ready for a full review.

The diff itself is clean: all three actions are bumped at every call site (8x pnpm/action-setup, 3x dtolnay/rust-toolchain, 1x claude-code-action), no stale pins left anywhere in .github/, and each new SHA resolves to a real upstream commit whose tag matches the trailing comment (ea17c68 = v6.1.0; 9c5ddab = v1.0.217, consistent with the existing # v1 convention; 6bed076 is dtolnay/rust-toolchain's stable branch tip, which carries no tag by design). No spec or lint references these pins, so nothing else needs updating.

The one bump with real behavior in it is pnpm/action-setup v6.1.0, whose sole commit is feat: support pnpm v12. It reroutes install through a new native-bootstrap path only when the target version is v12; this repo pins pnpm@11.24.0 via packageManager, so the v11 branch — including the existing standalone fallback for old Node — is untouched. The failed run's log confirms it: Switching pnpm from v11.25.0 to v11.24.0, same version as before.

The red Build & Test is not this PR. It's Wall.test.tsx > Wall on the Lath engine > Close anyway discards the notes and removes the Surface without a batch, and the same test failed on main earlier today in run 34088776809 (817a00e5) — same file, same test name. An action-pin swap can't change React rendering, and the resolved pnpm/Node versions are identical either way. There's no open issue tracking this flake.

Verification notes

• Call sites after the bump — grep -rn 'pnpm/action-setup@\|dtolnay/rust-toolchain@\|claude-code-action@' over .github/ returns only the new SHAs, across ci.yml, chromatic.yml, release.yml, security-audit.yaml.
• SHA→tag: gh api repos/<action>/tags matches ea17c68… to v6.1.0 and 9c5ddab… to v1.0.217. 6bed076… has no tag — expected for the stable branch, same as the pin it replaces.
• Upstream deltas: pnpm/action-setup 1 commit (pnpm v12 support); dtolnay/rust-toolchain 3 commits touching only action.yml and scripts/update-revs.sh; claude-code-action 6 commits, mostly a Claude Code / Agent SDK version bump.
• Failing job: run 34119821754, lib/src/components/Wall.test.tsx:1949 — 1 failed / 2787 passed.
• Main-branch CI on this PR's merge base (cbb1e9d0) is green, so the flake is intermittent rather than a standing break.